Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/FV2pKbkeInp6AEl4_hitsdUBjXQ.roa
File: FV2pKbkeInp6AEl4_hitsdUBjXQ.roa (raw, json)
Hash identifier: VkA3G+3/Y6XzbVEp346tBAhFxc7V/mWps3IZNPrcCbw=
Subject key identifier: 15:5D:A9:29:B9:1E:22:7A:7A:00:49:78:FE:18:AD:B1:D5:01:8D:74
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 10DD7257
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/FV2pKbkeInp6AEl4_hitsdUBjXQ.roa
Signing time: Wed 08 Jun 2022 17:07:02 +0000
ROA not before: Wed 08 Jun 2022 17:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58316
IP address blocks: 185.56.216.0/23 maxlen: 23
185.17.104.0/23 maxlen: 23
185.198.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282948183 (0x10dd7257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jun 8 17:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=155da929b91e227a7a004978fe18adb1d5018d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:4b:b9:ca:b5:ab:e8:01:0a:a0:5c:54:41:
19:82:eb:1b:b4:1c:02:46:36:bd:c4:bc:5c:f6:58:
89:26:47:38:2c:30:a1:57:82:a8:10:8b:36:c5:9b:
ad:29:df:54:f7:3e:e0:2a:4a:3b:66:35:40:a7:00:
a2:7c:86:57:31:91:96:16:c5:b3:5c:34:64:a3:c0:
c4:b7:44:21:c3:bd:69:8f:42:1a:bc:87:0a:6d:1c:
25:c2:9e:8c:ed:72:9a:7a:29:56:be:82:88:8a:1e:
3f:26:ae:9d:e3:35:8e:e6:5a:5c:bb:d8:59:16:d9:
fe:02:b0:84:68:b7:10:10:1c:13:9a:e2:84:74:3d:
4f:b4:6f:fd:12:c4:6d:88:1e:86:de:7f:c4:08:81:
7f:82:54:44:45:73:fe:84:f4:e6:06:54:d4:c1:d1:
32:e3:d4:4c:30:ec:be:7c:d8:d0:8c:71:c2:a8:31:
6a:c3:4d:f7:d0:cc:a0:2a:8f:60:f9:2a:cf:a8:f0:
8e:48:fa:16:4b:e0:87:b4:42:ea:e4:14:6f:d7:04:
3d:e9:10:72:26:f5:6f:87:a7:58:c4:21:a9:54:19:
8c:58:f0:7f:f0:db:a9:01:b3:52:a7:fa:fc:d1:7f:
f1:25:6a:b6:94:86:a2:3a:11:9e:76:9a:4c:03:6a:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:A9:29:B9:1E:22:7A:7A:00:49:78:FE:18:AD:B1:D5:01:8D:74
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/FV2pKbkeInp6AEl4_hitsdUBjXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.104.0/23
185.56.216.0/23
185.198.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:40:c5:8f:ed:43:68:7d:55:4d:eb:54:b0:b9:25:4d:51:6e:
ad:bb:83:a5:3a:2c:73:6f:75:9e:38:e4:cc:fd:c0:78:9b:f5:
78:f8:94:53:e4:0f:0d:77:fe:44:31:a1:4d:20:5d:87:00:06:
68:d8:9e:20:8a:1b:f1:3f:51:f8:93:7d:cb:59:85:21:11:47:
4e:2c:8a:80:47:84:d9:17:a3:84:bc:5e:f5:cc:fb:c4:61:49:
ed:b3:59:1e:34:10:9e:03:99:9b:7e:59:01:3a:ba:9b:c6:7a:
c9:16:2c:d4:2c:ef:bb:e0:11:ce:81:87:a8:bc:9d:41:e7:8d:
f0:4d:bf:f9:f2:c2:e6:3a:03:22:e4:a7:97:fd:b6:32:fe:f4:
1f:8f:46:da:90:71:07:50:9f:c6:79:63:a0:3f:7d:fb:89:f5:
ad:e2:ab:fc:67:20:de:24:ea:23:02:5c:d1:5b:73:7c:ba:96:
97:39:cf:e4:56:da:e2:89:a6:a9:d9:73:e5:c1:97:9d:aa:b3:
69:ae:9c:65:4d:11:d4:24:da:c0:50:62:02:a2:ba:e2:56:d5:
4f:76:a9:48:1e:39:a9:a5:54:b4:d3:91:90:79:b1:e9:dc:35:
ff:99:2f:af:f1:b1:a9:4c:67:e9:90:be:cc:2f:da:53:1b:e2:
08:f6:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:43 2025 by rpki-client